Maltego

Manage Transforms

Modified on: Thu, 14 Jun, 2018 at 3:58 PM

Transform Manager is a tool located within Maltego to help with the addition of transform application servers (TAS) as well as the configuration of transforms from those servers and sets (groupings of transforms).

Clicking the Manage Transforms button will open the Transform Manager Window which is split between three tabs. Namely, All Transforms, Transform Servers and Transform Sets.

All Transforms

Transforms can be edited from the default Transform Manager window (see above). From this window, you can sort transforms by:

Transform: The name of the transform.

Status: Whether the transform is ‘ready’ or has requirements such as a disclaimer or input that needs to be set.

Location: The Transform Application Servers (TAS) that this transform is found on.

Default Set: The default set this transform can be found in.

Input: The input entity type (what you click on to run this transform).

Output: The output entity type(s) (What is returned after running this transform).

This window can also be searched via the control at the top right which will search the transform names column:

With the default layout of the Transform Manager the following sections are also available:

Transform Information (bottom left): This section describes the transform, gives additional transform information such as transform author and informs of any user action needed, such as accepting disclaimers or if additional settings are needed.

Transform Settings (bottom right): This section allows the modification of transform specific settings such as API keys, timeouts, setting fields to popup and so on.

Transform Servers

The Transform Servers tab displays the servers that are available to you which you can easily turn on and off to set if they are used. This is useful when you have multiple servers and would prefer not to specify every time you run a transform which server it should be run on. You can also view transforms on specific servers by expanding each server with the (+) icon, as seen below:

Transform Sets

Sets are a way of grouping transforms that are commonly run together. With the default installation of Maltego you will notice various sets have been preconfigured for you, such as the Resolve to IP set which groups the transforms that convert DNSName, MX Record, NS Record and Website Entities to IP addresses. This has been done so that instead of having to select each individual entity type you can run a set of transforms on them.

Creating a Set

To create a new set simply select the New Set... button within the Set Manager and fill in the Set Name and a Description for the set (optional).

Editing Sets

To add or remove transforms from a set, start by selecting the set you wish to modify from the list of available sets within the right-hand pane and then drag the transform from the left-hand pane over it.

To add more than one transform to the set simply select multiple transforms by using either the shift or Ctrl modifiers and then drag the selection onto the set. Alternatively, you can simply select the transforms you wish to add, right-click on them and use the Add to Set-> context menu and select the set you wish to use.

To remove specific transforms to a set, select the transforms that you wish to remove within the selected set, right-click and select Remove from set.

Deleting a Set

To permanently delete a set, select the set from the right-hand pane, right-click on it and click Delete....

You will then be given a dialog to confirm that you wish to delete the set: